Trojan.Win32.Agent.xbnxik malicious file

The Trojan.Win32.Agent.xbnxik is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Agent.xbnxik virus can do?

Sample contains Overlay data
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Win32.Agent.xbnxik?


File Info:
name: 335CC6FF6A32E81A33FC.mlw
path: /opt/CAPEv2/storage/binaries/65916763fbafcc475fdc42fd30226391bb56dd10ef58c9a5da8e4e2f802b137a
crc32: E5FB9123
md5: 335cc6ff6a32e81a33fc09ae175156cc
sha1: ec04c8c3fd3d959e2a1ed9dd05bf3606606135aa
sha256: 65916763fbafcc475fdc42fd30226391bb56dd10ef58c9a5da8e4e2f802b137a
sha512: 752a052fdb47b195f0144098a6ac6d92a2eacce894844319ff164584df896ddc59648171fb8c6e6124a49a5fc34112d51d0270cfc9eef6d949cd856c5c229588
ssdeep: 3072:KbAUogI3IC5UtbYcPztjRf8/EChPPIpwnmHeQVTNoaU8ImPUXVlN:KbHoG2Ut/PJjRfW0Kuoa9nPUX
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1ECA494929C64AF45FE16453427956EBA004E7D2F66E4422C785CFA0B337399B30AFD0B
sha3_384: 5686cdf5afcc2d0c94966c58627a57d8f01b94a63799e3012170b5d685bc1b96e79977cb1dde8fb95592a6547f587f46
ep_bytes: 68e4914200e8eeffffff000000000000
timestamp: 2019-01-19 13:34:56

Version Info:
CompanyName: UEFI
ProductName: Kawaii-Unicorn
FileVersion: 1.00
ProductVersion: 1.00
InternalName: Kawaii-Unicorn
OriginalFilename: Kawaii-Unicorn.exe
Translation: 0x0804 0x04b0

Trojan.Win32.Agent.xbnxik also known as:

Bkav	W32.AIDetectMalware
AVG	Win32:Evo-gen [Trj]
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop20.3145
MicroWorld-eScan	Generic.Dacic.94CCEEA9.A.B3DE2089
Skyhigh	BehavesLike.Win32.Generic.gt
McAfee	GenericRXTC-TT!335CC6FF6A32
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Generic.Dacic.94CCEEA9.A.B3DE2089
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	P2PWorm ( 0054717e1 )
K7GW	P2PWorm ( 0054717e1 )
BitDefenderTheta	Gen:NN.ZevbaF.36804.Dm0@auM3n0mb
VirIT	Trojan.Win32.VBUnicorn.AA
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/VBClone.E
Cynet	Malicious (score: 100)
APEX	Malicious
Avast	Win32:Evo-gen [Trj]
ClamAV	Win.Packed.Generic-9967832-0
Kaspersky	Trojan.Win32.Agent.xbnxik
BitDefender	Generic.Dacic.94CCEEA9.A.B3DE2089
NANO-Antivirus	Trojan.Win32.VB.jownbp
SUPERAntiSpyware	Trojan.Agent/Gen-Tedy
Tencent	Trojan.Win32.VB.ha
Emsisoft	Generic.Dacic.94CCEEA9.A.B3DE2089 (B)
F-Secure	Trojan.TR/Crypt.XPACK.Gen
Zillya	Trojan.VBGen.Win32.1
FireEye	Generic.mg.335cc6ff6a32e81a
Sophos	Troj/VB-KCP
SentinelOne	Static AI – Suspicious PE
GData	Generic.Dacic.94CCEEA9.A.B3DE2089
Jiangmin	Trojan.VB.bmcx
Varist	W32/VB.VM.gen!Eldorado
Avira	TR/Crypt.XPACK.Gen
MAX	malware (ai score=85)
Antiy-AVL	Trojan/Win32.VBClone
Kingsoft	malware.kb.a.966
Arcabit	Generic.Dacic.94CCEEA9.A.B3DE2089
ZoneAlarm	Trojan.Win32.Agent.xbnxik
Microsoft	Trojan:Win32/Fareit.VB!MTB
Google	Detected
AhnLab-V3	Trojan/Win.Fareit.R626300
VBA32	SScope.Trojan.VB
ALYac	Generic.Dacic.94CCEEA9.A.B3DE2089
Cylance	unsafe
Panda	Trj/GdSda.A
Rising	Trojan.VBClone!1.B5C7 (CLASSIC)
Ikarus	Trojan.Win32.VBClone
MaxSecure	Virus.W32.GenericML.xnet
Fortinet	W32/VBClone.D!tr
DeepInstinct	MALICIOUS

How to remove Trojan.Win32.Agent.xbnxik?

Trojan.Win32.Agent.xbnxik removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X